I Feel like these "mistakes" are totally on purpose to get us internal crowd going. As someone who is in the infosec field, I can't imagine someone "accidentally" publishing to production environment even if they are using wordpress or something along those lines. It could be a mistake but seems to happen a few times ahaha.
It has always been a question in my mind why Rivian didn't ask us to create an account when we placed our reservations. It seems a requirement to log into an account would be a good way to only provide the configurator for reservation holders. I do remember having to set up a Tesla account when I reserved a Model 3 (ultimately decided not to buy).